Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/8Bx41e61V4yG4hVYfxbgJXcgBko.roa
File:                     8Bx41e61V4yG4hVYfxbgJXcgBko.roa (raw, json)
Hash identifier:          HX2ygwwGqfnuxDTIzp65OK3Wu/ysXXhe3TBOnWvfDTQ=
Subject key identifier:   F0:1C:78:D5:EE:B5:57:8C:86:E2:15:58:7F:16:E0:25:77:20:06:4A
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       05D93302
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/8Bx41e61V4yG4hVYfxbgJXcgBko.roa
Signing time:             Sat 01 Jan 2022 15:58:47 +0000
ROA not before:           Sat 01 Jan 2022 15:58:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29278
IP address blocks:        212.92.23.0/24 maxlen: 24
                          82.150.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98120450 (0x5d93302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Jan  1 15:58:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f01c78d5eeb5578c86e215587f16e0257720064a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:34:65:8b:70:f8:cc:17:f8:c2:ba:63:a4:76:
                    ee:9a:02:cc:58:a5:3c:2e:61:49:05:1e:a1:bd:1b:
                    45:e9:b2:2d:85:86:cf:9d:cd:9c:64:77:9b:b9:44:
                    13:32:58:c6:f8:6f:36:2e:7d:f0:e7:d8:e4:57:98:
                    0c:0d:f6:1f:7d:b5:19:56:c6:f6:9d:c9:64:5d:0e:
                    5b:ab:52:0d:81:a5:7a:2e:2a:51:cd:57:cc:a0:4a:
                    19:8b:7f:fe:b9:f7:bd:91:98:c8:0d:0a:76:1a:68:
                    0d:72:ba:e0:a0:20:b0:50:f8:26:56:88:22:bd:42:
                    7c:a7:0e:5e:e8:5a:19:e8:3f:32:66:f1:67:69:a0:
                    6e:c7:05:4b:6f:46:39:12:73:2e:7b:f0:06:6e:7e:
                    22:c6:6b:02:ca:be:20:8d:67:59:d0:0f:90:25:b4:
                    fe:9f:5b:8f:a4:36:34:73:ff:75:19:19:e8:7e:31:
                    ac:ed:05:07:22:3f:fe:db:ef:ce:c9:ab:f1:9c:bd:
                    1d:ad:65:87:c0:e6:cb:9e:52:29:1b:73:35:e4:1c:
                    c5:17:22:db:86:d6:0d:8d:04:3c:36:b2:54:3c:5b:
                    eb:ad:8f:19:28:da:3a:7e:72:7c:b5:be:43:07:65:
                    5e:32:34:23:d7:ce:ce:ad:25:1f:cc:38:75:8c:c1:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:78:D5:EE:B5:57:8C:86:E2:15:58:7F:16:E0:25:77:20:06:4A
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/8Bx41e61V4yG4hVYfxbgJXcgBko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.150.63.0/24
                  212.92.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:94:77:6b:bb:08:7a:3a:eb:ea:52:43:42:22:bc:8f:04:e4:
         21:dd:36:06:f9:bb:84:9b:ff:67:cd:1b:30:6b:07:99:05:10:
         5f:fb:be:55:63:1f:79:30:7e:1c:c1:12:d4:63:3d:50:57:1b:
         e2:d9:65:49:4e:84:8a:a6:9f:f8:60:ec:7c:78:b1:40:89:33:
         21:f5:81:5d:78:88:7b:3c:46:92:1a:f3:cc:11:ae:61:23:7a:
         0f:bd:ea:98:fa:b5:2b:15:62:ca:ea:fa:af:52:8d:19:49:16:
         f2:a8:bb:07:60:63:0b:2a:36:cd:e5:12:7c:ac:08:63:3a:97:
         f2:4d:17:c2:5d:2f:a3:8e:5f:2c:13:7a:74:19:62:3e:cc:d4:
         44:33:9d:5b:e6:6a:27:7f:26:64:3b:e2:70:62:b5:e3:70:d6:
         1d:05:d2:1d:46:b4:e7:b9:80:c2:12:72:69:e0:f9:18:86:7b:
         25:b6:13:d6:a8:19:41:ba:4d:0c:52:f1:f7:77:03:a0:59:2c:
         01:1b:9a:74:a1:44:24:d3:82:ac:f0:d5:97:80:27:0a:ad:87:
         ed:8e:ac:7c:12:75:be:da:04:ff:3e:59:10:3e:1e:6f:96:74:
         77:dd:68:d1:74:c6:f0:d0:78:c1:e8:4d:61:66:67:4a:ad:e7:
         27:66:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org